The owner of Digital Security explained US sanctions against the company by vulnerabilities in Intel and Word

The owner of Digital Security, Ilya Medvedovsky, linked his company's entry into the US sanctions list with the disclosure of two vulnerabilities.

Quote: “The main detonator in this story was the two high-profile vulnerabilities we published over the past year, which literally blew up the whole world last spring and autumn. These are the 10-year-old RCE (Eng. Remote Code Execution, computer vulnerability) in the Intel ME processor (an autonomous subsystem built into almost all Intel processor chipsets since 2008) and the 17-year-old RCE in Word. "bugs". The costs of the profession,” Medvedovsky wrote in his Facebook post. ‬

Context

On Monday, the US Treasury imposed new sanctions on Russian companies and individuals for working with Russian intelligence agencies, which are called a source of cyber threats to the US and other countries. Under the sanctions was the company "Divetechnoservice", which supplies underwater equipment for Russian government agencies, the St. Petersburg company Digital Security, as well as the Israeli company Embedi and the Dutch-Czech-Israeli Erpscan, which, according to the US authorities, are associated with it, as well as the Research Institute "Quantum" , which is considered the basic scientific center for the creation of special-purpose computer systems. You can read more about who fell under sanctions and for what here .